Manuals / ZyXEL Communications / Computer Equipment / Network Router

ZyXEL Communications HS100/HS100W manual HomeSafe User’s Guide VPN Screens 14-1

Models: HS100/HS100W

1 357

Download 357 pages 54.31 Kb

Page 195

HomeSafe User’s Guide

VPN Screens

14-1

Image 195

ZyXEL Communications HS100/HS100W manual HomeSafe User’s Guide VPN Screens 14-1

Contents

Version 10/2005 HS-100 / HS-100WCopyright 2004 by ZyXEL Communications Corporation DisclaimerTrademarks Certifications Information for Canadian Users Online Registration ZyXEL Limited WarrantyCustomer Support Table of Contents III 11-1 Viii 27.1 Page List of Figures Xiv List of Figures 10-1 Xvi List of Figures Xvii Xviii List of Figures List of Tables List of Tables 20-3 Xxii List of Tables Related Documentation User’s Guide Feedback¾ ZyXEL Glossary and Web Site Syntax Conventions Graphics Icons KeyDslam HomeSafe User’s Guide Preface Xxv Part Page Getting to Know Your HomeSafe HomeSafe FeaturesPhysical Features Non-Physical FeaturesFirewall Content FilteringBrute-Force Password Guessing Protection 802.11b Wireless LAN Standard HS-100W onlyPPPoE Packet FilteringUniversal Plug and Play UPnP Call SchedulingTraffic Redirect Dhcp Dynamic Host Configuration ProtocolUpgrade HomeSafe Firmware via LAN Network Address Translation NATHomeSafe Parental Control Gateway Secure Broadband Internet Access via Cable or DSL ModemWireless Association List HS-100W only Applications for the HomeSafeWireless LAN Application Example Wireless LAN ApplicationIntroducing the Web Configurator Web Configurator OverviewAccessing the HomeSafe Web Configurator Following table describes the fields in this screen System Administrator Password SetupWlan Setup Set up your wireless LAN using the second wizard screenWlan Setup Basic Security Access screenEssid Ascii Wlan Setup Extended SecurityFollowing table describes the labels in this screen WEPRefer to the chapter on wireless LAN for more information Internet Configuration SetupInternet Access Setup Internet Configuration Setup ISP ParametersDhcp Internet Access Static IP Address SetupParental Control Wizard Internet Configuration Setup CompleteWizard Parental Control Wizard Parental Control Time SetupParental Control Create or Edit a Profile 10 Wizard Parental Control Time Setup11 Wizard Create or Edit a Profile Parental Control Profile Information12 Wizard Parental Control Profile Information Parental Control User Group13 Wizard Parental Control User Group Administrator can decide each group’sAccess rights Parental Control Time AllowanceParental Control Application Blocking Parental Control Account Summary 15 Wizard Parental Control Application BlockingAllowance screen 16 Wizard Parental Control Summary Parental Control Register for Content FilterChecking Content Filtering Activation Content Filtering with an External ServerContent Filter Service Activation If you click Register Later you will proceed to FigureFollowing screen appears after you click Activate in Figure Content Filter Setup Complete Accessing the Internet via the HomeSafe Gateway25 Password Screen Navigation Panel Resetting the HomeSafeProcedure To Use The Reset Button HomeSafe Main MenuLink TAB Function 17 Screens SummaryFTP MaintenanceFirewall Remote Mgmt TelnetPage Domain Name Connection Wizard General Setup and System NameChapter Connection Wizard Connection Wizard OverviewConnection Wizard Screen Connection Wizard General SetupConnection Wizard Wireless LAN Setup Basic Security Ethernet Connection Wizard Wireless LAN Setup Extend SecurityConnection Wizard Ethernet Encapsulation PPPoE EncapsulationConnection Wizard PPPoE Encapsulation Connection Wizard Pptp Encapsulation Pptp EncapsulationPrivate IP Address Ranges WAN IP Address AssignmentIP Address and Subnet Mask DNS Server Address AssignmentWAN MAC Address ISP Connection Wizard WAN SetupConnection Wizard Finish Basic Setup Complete10 Connection Wizard Problems HomeSafe User’s Guide Connection Wizard System, LAN, Wlan and WAN Click System to open the General screen Configuring General SetupChapter System Screens System OverviewConfiguring Dynamic DNS Dynamic DNSDynDNS Wildcard System Ddns Configuring Time Setting Configuring PasswordSystem Time Setting Daylight Savings Dhcp Setup Chapter LAN ScreensLAN Overview Multicast Any IPAny IP Example Application How Any IP WorksClick LAN to open the IP screen Configuring IPLAN TCP/IP LAN Static Dhcp Configuring Static DhcpLAN IP Alias Configuring IP AliasLAN IP Alias 2 BSS Wireless Configuration and RoamingWireless LAN Overview Ibss3 ESS Basic Service set1 RTS/CTS Wireless LAN BasicsFragmentation Threshold Configuring WirelessRTS/CTS Configuring RoamingRoaming Example Requirements for RoamingWireless stations must have the same Essid to All APs on the same subnetAllow roaming Page Wireless Security Overview Chapter Wireless SecurityWPA WPA-PSKWEP Overview AuthenticationWireless Security Relational Matrix Security Parameters SummaryPreamble Type WEP Authentication StepsEncryption field Configuring WEP EncryptionUser Authentication Introduction to WPAEncryption WPA-PSK application looks as follows WPA-PSK Application ExampleTimer on the Radius server has priority Configuring WPA-PSK AuthenticationIf wireless station authentication is done Using a Radius server, the reauthenticationWPA with Radius Application Example Wireless Client WPA SupplicantsWPA with Radius Application Example Configuring WPA Authentication802.1x Overview Wlan Wireless WPAConfiguring 802.1x and Dynamic WEP Key Exchange Dynamic WEP Key ExchangeEAP-MD5 cannot be used with Dynamic WEP Key Exchange Configuring 802.1x and Static WEP Key Exchange Wlan Wireless 802.1x and Static WEP 10 Wlan Wireless 802.1x and Static WEPWlan Wireless 802.1x and Static WEP Reset ConfiguringMAC Filter Following table describes the labels in this menu Wlan MAC Address FilterMAC Active Select this option to activate the user profile Configuring Local User DatabaseIntroduction to Local User Database 10 Wlan Local User DatabaseIntroduction to Radius EAP Authentication Overview Configuring Radius11 Wlan Radius 15 Wlan RadiusHomeSafe User’s Guide Page TCP/IP Priority Metric Configuring RouteChapter WAN Screens WAN OverviewConfiguring WAN ISP Ethernet EncapsulationScreen shown next is for Ethernet encapsulation PPPoE Encapsulation WAN ISP PPPoE Encapsulation WAN ISP Pptp Encapsulation WAN IP Address Assignment Configuring WAN IPChoose Both, None, In Only or Out Only WAN IPSelected Use Fixed IP Address ServerConfiguring WAN MAC Choose RIP-1 , RIP-2B or RIP-2MRIP-1 Traffic Redirect Traffic Redirect WAN SetupWAN Traffic Redirect Configuring Traffic RedirectWAN Traffic Redirect SUA/NAT and Static Route Page What NAT Does Chapter Network Address Translation NAT ScreensNAT Overview NAT DefinitionsNAT Application How NAT WorksFollowing table summarizes these types NAT Mapping TypesNAT Mapping Types Using NATSUA Server SUA Single User Account Versus NATServices Port Number Port Forwarding Services and Port NumbersDefault Server IP Address Services and Port NumbersConfiguring Servers Behind SUA Example Configuring SUA ServerSUA/NAT Setup Configuring Address MappingOne-to-One and Server mapping types Address MappingConfiguring Address Mapping Trigger Port ForwardingMany-to-One and Server mapping types Following is an example of trigger port forwarding Configuring Trigger Port ForwardingTrigger Port Forwarding Example Two Points To Remember About Trigger PortsOnly one LAN computer can use a trigger port range at a time Page Click Static Route to open the screen as shown next Configuring IP Static RouteChapter Static Route Screens Static Route OverviewStatic Route Edit Configuring Route EntryNAT Screens 10-3 UPnP, Parental Control and Firewall UPnP and ZyXEL How Do I Know If Im Using UPnP?Chapter UPnP Universal Plug and Play OverviewConfiguring UPnP Installing UPnP in Windows ExampleClick UPnP to display the screen shown next Follow the steps below to install UPnP in Windows XP Installing UPnP in Windows MeInstalling UPnP in Windows XP Follow the steps below to install UPnP in Windows MeAuto-discover Your UPnP-enabled Network Device Using UPnP in Windows XP ExampleInternet Connection Properties Connections Select My Network Places under Other Places Web Configurator Easy AccessUPnP 11-7 Page Parental Control Overview Parental Control LoginsInitial Configuration Chapter Parental ControlParental Control Application Parental Administrator logHomeSafe Parental Control Wireless Gateway Application Configuring Parental ControlParental Control Web page. It may take up to another ten minutes For content filtering to be activated. See CheckingContent filtering activation Web site displays a registration successfulContent Filtering with an External Server Reset Click Reset to start configuring this screen againParental Control Group Edit Filter Parental Control Group Edit Configuration Parental Control Filter Parental Control 12-9 12-10 Parental Control Parental Control 12-11 HomeSafe checks How to set how much of the URLSee the Customizing Keyword Blocking URL Checking section forParental Control Edit Customizing Keyword Blocking URL CheckingService Description ServicesREALAUDIOTCP7070 RLOGINTCP513PPTPTUNNELGRE0 RCMDTCP512Parental Control Edit Check box Access, you should select the unrestrictedUser access will be denied after the End If you want to allow twenty-four hourWeekdays or Weekend boxes Parental Control Bypass ListParental Control 12-19 Page Chapter Firewall IntroductionGuidelines For Enhancing Security With Your Firewall Firewall Settings Firewall Settings ScreenLog All log all LAN to WAN packets Firewall, NAT and Remote ManagementLAN-to-WAN rules No LogWAN-to-LAN rules ServicesFirewall Service Click Clear All to empty the Blocked Service Remote Management Page Remote Management Limitations Only LAN only Neither DisableChapter Remote Management Screens Remote Management OverviewConfiguring WWW System TimeoutRemote Management and NAT Telnet Configuration on a TCP/IP Network Configuring TelnetRemote Management Telnet Configuring FTPRemote Management FTP SnmpSnmp Management Model Snmp is only available if TCP/IP is configuredSnmp Traps Configuring SnmpSupported MIBs Snmp TrapsRemote Management Snmp Remote Management DNS Configuring DNSIcmp Configuring SecurityRemote Management Screens 14-11 Page HomeSafe User’s Guide VPN Screens 14-1 Logs and Maintenance View Log Chapter Centralized LogsSettings, see section Log SettingsLog Settings Hourly When Log is FullDaily WeeklyChapter Maintenance Maintenance OverviewStatus Screen System Statistics Maintenance System StatisticsDhcp Table Screen Maintenance Dhcp TableAssociation List Any IP Table16.6 F/W Upload Screen Maintenance Firmware UploadUpload Warning Configuration ScreenBackup Configuration Restore ConfigurationMaintenance Restore Configuration 11 Configuration Restore Successful Back to Factory DefaultsRestart Screen 14 Factory DefaultsSMT General Configuration Page SMT Introduction Chapter Introducing the SMTEnter Main Menu CommandsNavigating the SMT Interface Operation Keystroke DescriptionMenu Title Description System Management Terminal Interface SummaryMain Menu Summary ? or ChangeMeMenu 23 System Password Changing the System PasswordField Description Example Chapter Menu 1 General SetupGeneral Setup Procedure To Configure MenuSelect Yes to configure Menu 1.1 Configure Dynamic DNS Procedure to Configure Dynamic DNSYes DynamicDNSUser Specified IP Address field From the main menu, enter 2 to open menu Chapter Menu 2 WAN SetupWAN Setup Introduction to WANPage 20.3 TCP/IP Ethernet Setup and Dhcp Chapter Menu 3 LAN SetupLAN Setup Protocol Dependent Ethernet SetupMenu 3.2 Dhcp Ethernet Setup Fields Menu 3.2 TCP/IP and Dhcp Ethernet SetupRIP-1,RIP-2B or RIP-2M Menu 3.2 LAN TCP/IP Setup FieldsBoth RIP-1Physical Network & Partitioned Logical Networks IP Alias SetupWireless LAN Setup Both, In Only, Out Only or NoneField Description Example Essid Auto DisableCH06 2437MHz RTSMixed Configuring MAC Address FilterMenu 3.5.1 Wlan MAC Address Filter Configuring Roaming on the HomeSafeMenu 3.5.2 Roaming Configuration 10 Menu 3.5.2 Roaming ConfigurationPage Ethernet Encapsulation Chapter Internet AccessIntroduction to Internet Access Setup Menu 4 Internet Access Setup EthernetConfiguring the Pptp Client New Fields in Menu 4 PPPoE screen Configuring the PPPoE ClientDefault New Fields in Menu 4 Pptp Screen21-4 Internet Access Chapter Remote Node Configuration Introduction to Remote Node SetupRemote Node Profile Setup Layer Options EthernetAlias Press Enter to go to Menu 11.3 Remote Node NetworkNailed-Up Connection Outgoing Authentication ProtocolCHAP/PAP Fields in Menu 11.1 PPPoE Encapsulation SpecificDynamic Edit IPMenu 11.1 Remote Node Profile for Pptp Encapsulation Remote Node Network Layer OptionsRIP-1/RIP-2B/RIP-2M or None Remote Node FilterSUA Only Many-to-One and ServerMenu 11.5 Remote Node Filter Ethernet Encapsulation Traffic Redirect Setup22-8 Remote Node Configuration IP Static Route Setup Chapter Static Route Setup23-2 Static Route Setup Dial-in User Setup Chapter Dial-in User SetupPage Applying NAT Menu 4 Applying NAT for Internet AccessNAT NAT SetupFull Feature Applying NAT in Menus 4Menu 15.1.255 is read-only SUA Address Mapping Rules Address Mapping SetsSUA Address Mapping Set Following table explains the fields in this menuOrdering Your Rules User-Defined Address Mapping SetsSelect Rule item Menu 15.1.1 First SetField Desription Example EditConfiguring a Server behind NAT Follow these steps to configure a server behind NATOne-to-One,Many-to-One and Server types Example 1 Internet Access Only Following are some examples of NAT configurationGeneral NAT Examples Example 2 Internet Access with an Inside Server Example 3 Multiple Public IP Addresses With Inside ServersDynamic Inside Global Address is assigned by the ISP Then enter 15 from the main menu Enter 1 to configure the Address Mapping SetsFollowing figures show how to configure the first rule Address Translation field in menu 4 or menu 11.3Enter 2 in Menu 15 NAT Setup Example 3 Menu Example 4 NAT Unfriendly Application Programs20 Example 4 Menu 15.1.1 Address Mapping Rules Menu 15.3 Trigger Port Setup Page Enabling the Firewall Access MethodsChapter Enabling the Firewall Remote Management and the FirewallSMT Advanced Management Chapter Filter Configuration Introduction to FiltersFilter Structure of the HomeSafe Execute Abbreviations Used in the Filter Rules Summary Menu Configuring a Filter SetAbbreviation Description Configuring a Filter RuleConfiguring a TCP/IP Filter Rule Rule Abbreviations UsedEqual TCP/IP Filter RuleField Description Options LessFollowing figure illustrates the logic flow of an IP filter Executing an IP Filter Configuring a Generic Filter RuleGeneric Filter Rule Menu Fields HomeSafe User’s Guide Generic Filter Rule Menu Fields Example Filter10 Example Filter Menu Filter Types and NAT Applying Remote Node Filters Firewall Versus FiltersApplying a Filter Applying LAN Filters14 Filtering Remote Node Traffic Page About Snmp Chapter Snmp ConfigurationSnmp Configuration Following table describes the Snmp configuration parametersSupported MIBs Snmp Traps Ports and Permanent Virtual CircuitsPort PVC Permanent Virtual Circuit Page System Security System PasswordConfiguring External Radius Server Chapter System SecurityEnter 4 to display Menu 23.4 System Security IEEE802.1x 29.1.3Menu 23.4 System Security IEEE802.1x No Access AllowedManagement Protocol is selected PSKGroup Data Privacy field ModeSystem Status System Information and DiagnosisSystem Maintenance Status Menu Fields Menu 24.1 System Maintenance StatusTo get to the System Information Menu 1 General SetupSystem Information System InformationSyslog Logging Menu 24.3.2 System Maintenance Syslog and AccountingLog and Trace Console Port SpeedSystem Information and Diagnosis 30-5 Call-Triggering Packet DiagnosticWAN Dhcp System Maintenance Menu Diagnostic30-8 System Information and Diagnosis File Type Internal Name External Name Description Chapter Firmware and Configuration File MaintenanceFilename Conventions Filename ConventionsFollow the instructions as shown in the next screen Backup ConfigurationUsing the FTP Command from the Command Line Example of FTP Commands from the Command LineGUI-based FTP Clients Backup Configuration Using TftpGeneral Commands for GUI-based FTP Clients Command DescriptionFollowing is an example Tftp command Restore ConfigurationTftp Command Example Restore Using FTPRestore Using FTP Session Example Uploading Firmware and Configuration FilesConfiguration File Upload You see the following screen when you telnet into menuFirmware File Upload FTP File Upload Command from the DOS Prompt Example FTP Session Example of Firmware File UploadTftp File Upload Tftp Upload Command Example Command Usage Chapter System MaintenanceCommand Interpreter Mode Command SyntaxBudget Management Call Control SupportCall History Fields Call HistoryTime and Date Setting Time and Date Setting FieldsNTP RFC-1305 the default, is similar to Time RFC-868 Daylight Saving field Resetting the TimePage Remote Management Chapter Remote ManagementLAN Only Introduction to Call Scheduling Chapter Call SchedulingOnce Menu 26.1 Schedule Set SetupApplying Schedule Sets to a Remote Node PPPoE Appendices and Index Page Troubleshooting Problem Corrective ActionAppendix a Control Group Edit screen Traditional Dial-up Scenario Appendix B PPPoEPPPoE in Action Benefits of PPPoEHomeSafeas a PPPoE Client Diagram B-2 The HomeSafeas a PPPoE ClientPptp and the HomeSafe What is PPTP?Diagram C-1 Transport PPP frames over Ethernet Appendix CControl & PPP connections Diagram C-2 Pptp Protocol OverviewDiagram C-3 Example Message Exchange between PC and an ANT Pptp Protocol OverviewPptp Page LOG Message Description Chart 1 System Error LogsChart 2 System Maintenance Logs Appendix D Log DescriptionsChart 3 UPnP Logs Chart 4 Content Filtering LogsID content Type Code Description Chart 5 Icmp Type and Code ExplanationsConfiguring What You Want the HomeSafe to Log Log CommandsDisplaying Logs Page Appendix E Setting up Your Computer’s IP Address Windows 95/98/MeIf you need TCP/IP If you need Client for Microsoft Networks Checking/Modifying Your Computer’s IP Address Windows 2000/NT/XP Click Advanced to go to the Advanced TCP/IP HomeSafe User’s Guide Turn on your HomeSafeand restart your computer if prompted Macintosh OS 8/9 Select Ethernet built-in from the Connect via listClose the TCP/IP Control Panel Macintosh OS Check your TCP/IP properties in the Network windowSelect Built-in Ethernet from the Show list Page Ieee Appendix F Wireless LAN and IeeeBenefits of a Wireless LAN Ad-hoc Wireless LAN ConfigurationDiagram F-1 Peer-to-Peer Communication in an Ad-hoc Network Infrastructure Wireless LAN ConfigurationDiagram F-2 ESS Provides Campus-Wide Coverage Page Advantages of the Ieee Appendix G Wireless LAN With IeeeDeployment Issues with Ieee Security Flaws with IeeeDiagram G-1 Sequences for EAP MD5-Challenge Authentication EAP-TLS Transport Layer Security Appendix H Types of EAP AuthenticationEAP-TTLS Tunneled Transport Layer Service EAP-MD5 Message-Digest AlgorithmDynamic Key Difficulty Wireless SecurityCertificate Client Certificate ServerAntenna Characteristics Appendix Antenna Selection and Positioning RecommendationTypes of Antennas For Wlan Positioning Antennas Appendix J Brute-Force Password Guessing Protection Chart 6 Brute-Force Password Guessing Protection CommandsExample Page Appendix K Triangle Route Ideal SetupTriangle Route Problem Triangle Route SolutionsGateways on the WAN Side How To Configure Triangle RouteDiagram K-3 IP Alias Diagram K-4 Gateways on the WAN SideBSS Appendix L IndexIbss See NAT See Ttls Wlan